Skip to content
mSCP

Generate SCAP

The generate_scap.py script creates security compliance documents in SCAP (Security Content Automation Protocol) formats. These documents can be used with SCAP-compatible scanning tools.

Output Formats

Section titled “Output Formats”
FormatDescription
SCAPComplete SCAP 1.4 datastream (default)
XCCDFeXtensible Configuration Checklist Description Format
OVALOpen Vulnerability and Assessment Language

Generate SCAP Documents

Section titled “Generate SCAP Documents”

  1. List available baselines

    Terminal window
    ./scripts/generate_scap.py -l

  2. Generate SCAP for all rules

    Terminal window
    ./scripts/generate_scap.py

  3. Generate for a specific baseline

    Terminal window
    ./scripts/generate_scap.py -b stig

  4. Find your files

    Output is saved to build/:

    FileDescription
    *_xccdf.xmlXCCDF document
    *_oval.xmlOVAL document
    *.xmlComplete SCAP datastream

Command Reference

Section titled “Command Reference”
FlagDescription
-lList available baseline tags
-b BASELINEGenerate for a specific baseline
-xGenerate only XCCDF
-oGenerate only OVAL
-d FILEInclude DISA STIG references from file

SCAP References

Section titled “SCAP References”

Next Steps

Section titled “Next Steps”